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To: 
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: "-Business ’Maine?' Ronayne & Cogley, P,C. 






Is the business located in the 
United States?: 




Business Address: 


Yes 


24 Fifth Avenue SW 
PO Box 759 
Aberdeen j SD 57402 






Foreign Business Address: 


(Company Type: 
Your Nil me: 








Contact Address: 


Other 


Colin Battersby 
Counsel 


McDonald Hopkins, PLC 
39533 Woodward Ave., Ste. 318 
Bloomfield Hills. MI 48304 






Content Address 
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Telephone Number: 


(248) 593-2952 
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Email. Address: 


cbattersby@mcdonaldhopkins.com 


Relationship to Ofg; • - Other 


Breach Type: 


Electronic 


Date Breach was Discovered: 


11/28/2018 


Number of Massachusetts 
Residen ts Affected: 


Person responsibiefor data 
breach.: 


Please give a detailed 
explanation of how the data 
breach occurred.: 


Unknown 






Please select the type'of personal' 
information that was includedin . 
the breached data.: 


Ronayne & Cogley, P.C. recently learned that an unauthorized 
individual may have obtained access to an employee’s email 
account between August 24 , 2018 and August 27, 2018. 
Ronayne & Cogley, P.C. immediately launched an investigation 
in consultation with outside cybersecurity professionals who 
regularly investigate and analyze these types of situations to 
analyze the extent of any compromise of the email account and 
the security of the emails and attachments contained within it. 
Based on its comprehensive investigation and document review, 
which concluded on November 28, 2018, Ronayne & Cogley, 
P.C. discovered that the compromised email account contained 
the affected' resident’s full name and Social Security number. 

Social Security Numbers = Seiection(s) 


Please check ALL of the boxes 
that apply to your breach.: 

For breaches involving paper: A 
lock or security mechanism was 


The breach was a result of a malicious/criminal act. 
Selections) 
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Physical access to systems 
containing personal information 
was restricted to authorized 
personnel only.: 
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■ Netwhrt ■ 

breached system: 


Internet Access Available 


For breaches involving 
electronic systems, complete the 
following: 


AH Massachusetts:residents 
affected by thabreiftch: haye;be®n 
notified of the breach.:, 


Personal information stored on the breached system was 
password-protected and/or restricted by user permissions. 
Seleetion(s) 


'Method(s) used to notify 
Massachusetts residents affected 
by the breach (check all that 
apply):: 


Option2 | US Mail 


Date notices were first sent to 
Massachusetts residents. 
(MM/DD/YYYY): 


12/31/2018 


Ail^Massaehnsett§j^si^iits : : : ‘'/ : .;/' :A. A;A. SAA y ©A A A ;: 

affected y 

offered eomn'limentaiw credit /Ay 




Law enforcement has been 
notified of this data breach- 


Please describe how your 
company responded to the 
breach. 'Include what changes . 
were made or may be made to 
•prevent another similar breach 
from occurring,: 


Ronayne & Cogley, P.G, immediately launched an investigation 
in consultation with outside cybersecurity professionals who 
regularly investigate and analyze these typesof situations to / A 


Ronayue & Cogley, P.C. is committed to maintaining the 


controls to enhance the security and privacy of personal 
information. /AAv©.. ■ y-vy'-'yA/iv-v -../yr 


Yes / No: 
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RONAYNE & COGLEY 

-ATTORNEYS AT LAW - 


P.C. 


Robert M. Ronayne - rob@ronaynecogley.com 
Certified Estate Planning Low Specialist 
Also admitted to practice in North Dakota 
ThomasI. Cogley-tom@ronaynecogley.com 
Also admitted to practice in Minnesota 
Mike Ronayne -1926-2012 



IMPORTANT INFORMATION 
PLEASE REVIEW CAREFULLY 


I am writing with important information regarding a recent security incident. The privacy and security of the 
persona! information we maintain is of the utmost importance to Ronayne & Cogley, P.C. We wanted to provide 
you with information about the incident, explain the services we are making available to you, and let you know 
that we continue to take significant measures to protect your information. 


We recently learned that an unauthorized individual may have obtained access to a limited amount of your 
personal information. 

To date, we are not aware of any reports of identity fraud or improper use of your information as a direct result of 
this incident. Out of an abundance of caution, we wanted to make you aware of the incident, explain the services 
we are making available to help safeguard you against identity fraud, and suggest steps that you should take as 
well. To protect you from potential misuse of your information, we are offering a complimentary one-year 
membership of Experian Identity Works SM Credit 3B. This product helps detect possible misuse of your personal 
information and provides you with identity protection services focused on immediate identification and 
resolution of identity theft. Identity Works Credit 3B is completely free to you and enrolling in this program will 
not hurt your credit score. For more information on identity theft prevention and IdentityWorks Credit 3B, 
including instructions on how to activate your complimentary one-year membership, please see the additional 
information provided in this letter. 

This letter also provides other precautionaiy measures you can take to protect your personal information, 
including placing a Fraud Alert and/or Security Freeze on your credit files, and/or obtaining a free credit report. 
Additionally, you should always remain vigilant in reviewing your financial account statements and credit 
reports for fraudulent or irregular activity on a regular basis. 

Please accept our apologies that this incident occurred. We are committed to maintaining the privacy of 
personal information in our possession and have taken many precautions to safeguard it. We continually 
evaluate and modify our practices and internal controls to enhance the security and privacy of your personal 
information. 


If you have any further questions regarding this incident, pleas e call our ded icated and confidential toll- 
free response line that we have set up to respond to questions atmm^. This response line is staffed 
with professionals familiar with this incident and knowledgeable on what youcandotoprotect against misuse 
of your information. The response line is available Monday through Friday.HHHHBBHj. 

Sincerely, _ 


Ronayne & Cogley, P.C. 


24 Fifth Avenue SW ( P.0. Box 759 | Aberdeen SD 57402-0759 
Teh 605.225.0100 ) Fax: 605.225.9558 

www.ronaynecogtey.com 










- OTHER IMPORTANT INFORMATION - 


1. Enrolling in Complimentary 12-Month Credit Monitoring . 

To help protect your identity, we are offering a complimentary one-year membership of Experian 
Identity Works SM Credit 3B. This product helps detect possible misuse of your personal information and 
provides you with superior identity protection support focused on immediate identification and resolution of 
identity theft. 


Activate IdentityWorks Credit 3B Now in Three Easy Steps 

1. enroll o^our c °^ enot work 

2. VISIT the Experian IdentityWo rks website t o enroll: 

3. PROVIDE the Activation Code: 

If you have questions about the product, need assistance with identity restoration or would li ke an alternati ve to 
enrolling in Experian IdentityWorks onlinsvplease contact Experian’s customer care team Be 

prepared to provide engagement number as proof of eligibility for the identity restoration services by 

Experian. 

ADDITIONAL DETAILS REGARDING YOUR 12-MONTH EXPERIAN IDENTITYWORKS CREDIT 
3B MEMBERSHIP: 



A credit card is not required for enrollment in Experian IdentityWorks Credit 3B. 


You can contact Experian immediately without needing to enroll in the product regarding any fraud issues. 
Identity Restoration specialists are available to help you address credit and non-credit related fraud. 

Once you enroll in Experian IdentityWorks, you will have access to the following additional features: 


■ Experian credit report at signup: See what information is associated with your credit file. Daily 
credit reports are available for online members only.* 

■ Credit Monitoring: Actively monitors Experian, Equifax and Transunion files for indicators of fraud. 

■ Experian IdentityWorks ExtendCARE™: You receive the same high-level of Identity Restoration 
support even after your Experian IdentityWorks membership has expired. 

■ $1 Million Identity Theft Insurance**: Provides coverage for certain costs and unauthorized 
electronic fund transfers. 


Activate your membership 
or call! 


today at 

to register with the activation code above. 


What you can do to protect your information: There are additional actions you can consider taking to reduce 
the chances of identity theft or fraud on your account(s). Please refer to 
www.ExperianIDWorks.com/restoration for this information. If you have any questions about IdentityWorks, 
need help understanding something on your credit report or suspect that an item on your credit report may be 
fraudulent, please contact Experian’s customer care team 


* Oftline members will be eligible So call for additional reports quarterly after enrolling. 

** Identity thefl insurance is underwritten by insurance company subsidiaries or affiliates of American International Group, Inc. (A1G). 
The description herein is a summary and intended for informational purposes only and does not include all terms, conditions and 
exclusions of the policies described. Please refer to the actual policies tor terms, conditions, and exclusions of coverage. Coverage may 
not be available in all jurisdictions. 
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Placing a Fraud Alert on Your Credit File . 


Whether or not you choose to use the complimentary 12 month credit monitoring services, we recommend that 
you place an initial 90-day “Fraud Alert” on your credit files, at no charge. A fraud alert tells creditors to 
contact you personally before they open any new accounts. To place a fraud alert, call any one of the three 
major credit bureaus at the numbers listed below. As soon as one credit bureau confirms your fraud alert, they 
will notify the others. 


Equifax 

P.O. Box 105069 
Atlanta, GA 30348 
www.etniifax.com 
1-800-525-6285 


Experian 

P.O. Box 2002 
Allen, TX 75013 
www.experian.com 
1-888-397-3742 


TransUnion LLC 
P.O. Box 2000 
Chester, PA 19016 
www.transunion.com 
1-800-680-7289 


3. Consider Placing a Security Freeze on Your Credit File . 


If you are very concerned about becoming a victim of fraud or identity theft, you may request a “Security 
Freeze” be placed on your credit file, at no charge. A security freeze prohibits, with certain specific exceptions, 
the consumer reporting agencies from releasing your credit report or any information from it without your 
express authorization. You may place a security freeze on your credit report by contacting all three nationwide 
credit reporting companies at the numbers below and following the stated directions or by sending a request in 
writing, by mail, to all three credit reporting companies: 


Equifax Security Freeze 
P.O.Box 105788 
Atlanta, GA 30348 
https://www.freeze.equifax.eoin 
1-800-685-11 i 1 

1 -800-349-9960 (NY residents only) 


Experian Security Freeze 

P.O. Box 9554 
Allen, TX 75013 
http://exnerian.com/freez e 
1-888-397-3742 


TransUnion Security Freeze 
P.O. Box 2000 
Chester, PA 19016 

httn://www.transuiiioii,com/securitvfreeze 

1-888-909-8872 


In order to place the security freeze, you’ll need to supply your name, address, date of birth, Social Security 
number and other personal information. After receiving your freeze request, each credit reporting company will 
send you a confirmation letter containing a unique PIN (personal identification number) or password. Keep the 
PIN or password in a safe place. You will need it if you choose to lift the freeze. 

If your personal information has been used to file a false tax return, to open an account or to attempt to open an 
account in your name or to commit fraud or other crimes against you, you may file a police report in the City in 
which you currently reside. 

If you do place a security freeze prior to enrolling in the credit monitoring service as described above, you will 
need to remove the freeze in order to sign up for the credit monitoring service. After you sign up for the credit 
monitoring service, you may refreeze your credit file. 

4. Obtaining a Free Credit Report . 

Under federal law, you are entitled to one free credit report ever y 12 months from each of the above three major 
nationwide credit reporting companies. Call or request your free credit reports online at 

www.annualcreditreport.com. Once you receive your credit reports, review them for discrepancies. Identify 
any accounts you did not open or inquiries from creditors that you did not authorize. Verify all information is 
correct. If you have questions or notice incorrect information, contact the credit reporting company. 

5. Additional Helpful Resources . 

Even if you do not find any suspicious activity on your initial credit reports, the Federal Trade Commission 
(FTC) recommends that you check your credit reports periodically. Checking your credit report periodically can 
help you spot problems and address them quickly. 




If you find suspicious activity on your credit reports or have reason to believe your information is being 
misused, call your local law enforcement agency and file a police report. Be sure to obtain a copy of the police 
report, as many creditors will want the information it contains to absolve you of the fraudulent debts. You may 
also file a complaint with the FTC by contacting them on the web at www.ftc.gov/idtheft, by phone at 1-877- 
IDTHEFT (1-877-438-4338), or by mail at Federal Trade Commission, Consumer Response Center, 600 
Pennsylvania Avenue, NW, Washington, DC 20580. Your complaint wilt be added to the FTC’s Identity Theft 
Data Clearinghouse, where it will be accessible to law enforcement for their investigations. In addition, you 
may obtain information from the FTC about traud alerts and security freezes. 

6. Obtaining a Police Report . 

Under Massachusetts law, you have the right to obtain a police report in regard to this incident. If you are the 
victim of identity theft, you also have the right to file a police report and obtain a copy of it. 



